Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250511	4.3	警告	日本アルカテル・ルーセント bt	-	BT Home Hub などで使用される Thomson/Alcatel SpeedTouch 7G ルータにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5385	2012-06-26 15:54	2007-10-11	Show	GitHub Exploit DB Packet Storm

250512	4.3	警告	日本アルカテル・ルーセント bt	-	BT Home Hub で使用される Thomson/Alcatel SpeedTouch 7G ルータにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2007-5384	2012-06-26 15:54	2007-10-11	Show	GitHub Exploit DB Packet Storm

250513	10	危険	日本アルカテル・ルーセント bt	-	BT Home Hub で使用される Thomson/Alcatel SpeedTouch 7G ルータにおける管理者アクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2007-5383	2012-06-26 15:54	2007-10-11	Show	GitHub Exploit DB Packet Storm

250514	10	危険	シスコシステムズ	-	CiscoWorks WLSE を変換する変換ユーティリティにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-5382	2012-06-26 15:54	2007-10-10	Show	GitHub Exploit DB Packet Storm

250515	6.9	警告	GNU Project	-	Emacs の Tramp 拡張における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2007-5377	2012-06-26 15:54	2007-10-4	Show	GitHub Exploit DB Packet Storm

250516	10	危険	LedgerSMB dws systems inc.	-	LedgerSMB における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5372	2012-06-26 15:54	2007-09-28	Show	GitHub Exploit DB Packet Storm

250517	5	警告	富士通	-	複数の Fujitsu Interstage 製品における重要な情報を取得される脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5366	2012-06-26 15:54	2007-10-11	Show	GitHub Exploit DB Packet Storm

250518	6.8	警告	ag-solutions Mambo Foundation Joomla!	-	Mambo および Joomla! 用の Avant-Garde Solutions MOSMedia Lite コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5362	2012-06-26 15:54	2007-10-10	Show	GitHub Exploit DB Packet Storm

250519	8.5	危険	Alcatel-Lucent	-	Alcatel-Lucent OmniPCX Enterprise の Communication Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2007-5361	2012-06-26 15:54	2007-11-20	Show	GitHub Exploit DB Packet Storm

250520	6.8	警告	Digium	-	Asterisk の voicemail 機能におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-5358	2012-06-26 15:54	2007-10-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269541	7.8	HIGH Local	plug_project	plug	Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to null byte injection in the Plug.Static component, which may allow users to bypass filetype restrictions.	CWE-74 Injection	CVE-2017-1000052	2024-11-21 12:04	2017-07-17	Show	GitHub Exploit DB Packet Storm

269542	6.1	MEDIUM Network	xwiki	cryptpad	Cross-site scripting (XSS) vulnerability in pad export in XWiki labs CryptPad before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the pad content	CWE-79 Cross-site Scripting	CVE-2017-1000051	2024-11-21 12:04	2017-07-17	Show	GitHub Exploit DB Packet Storm

269543	7.5	HIGH Network	jasper_project fedoraproject redhat canonical	jasper fedora enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server ubuntu_linux	JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.	CWE-476 NULL Pointer Dereference	CVE-2017-1000050	2024-11-21 12:04	2017-07-17	Show	GitHub Exploit DB Packet Storm

269544	7.5	HIGH Network	qs_project	qs	the web framework using ljharb's qs module older than v6.3.2, v6.2.3, v6.1.2, and v6.0.4 is vulnerable to a DoS. A malicious user can send a evil request to cause the web framework crash.	CWE-20 Improper Input Validation	CVE-2017-1000048	2024-11-21 12:04	2017-07-17	Show	GitHub Exploit DB Packet Storm

269545	9.8	CRITICAL Network	rbenv_project	rbenv	rbenv (all current versions) is vulnerable to Directory Traversal in the specification of Ruby version resulting in arbitrary code execution	CWE-22 Path Traversal	CVE-2017-1000047	2024-11-21 12:04	2017-07-17	Show	GitHub Exploit DB Packet Storm

269546	7.5	HIGH Network	mautic	mautic	Mautic 2.6.1 and earlier fails to set flags on session cookies	NVD-CWE-noinfo	CVE-2017-1000046	2024-11-21 12:04	2017-07-17	Show	GitHub Exploit DB Packet Storm

269547	9.8	CRITICAL Network	gnome	gtk-vnc	gtk-vnc 0.4.2 and older doesn't check framebuffer boundaries correctly when updating framebuffer which may lead to memory corruption when rendering	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-1000044	2024-11-21 12:04	2017-07-17	Show	GitHub Exploit DB Packet Storm

269548	6.1	MEDIUM Network	mapbox	mapbox.js	Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control	CWE-79 Cross-site Scripting	CVE-2017-1000043	2024-11-21 12:04	2017-07-17	Show	GitHub Exploit DB Packet Storm

269549	6.1	MEDIUM Network	mapbox_project	mapbox	Mapbox.js versions 1.x prior to 1.6.5 and 2.x prior to 2.1.7 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON Name.	CWE-79 Cross-site Scripting	CVE-2017-1000042	2024-11-21 12:04	2017-07-17	Show	GitHub Exploit DB Packet Storm

269550	9.8	CRITICAL Network	framasoft	framadate	Framadate version 1.0 is vulnerable to Formula Injection in the CSV Export resulting possible Information Disclosure and Code Execution	CWE-20 Improper Input Validation	CVE-2017-1000039	2024-11-21 12:04	2017-07-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed